RA-5(3): Breadth / Depth Of Coverage

Control Family:

Risk Assessment

Parent Control:

RA-5: Vulnerability Scanning

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

ID.RA-1
PR.IP-12
DE.CM-8
DE.DP-4
RS.CO-3
RS.MI-3

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5.2.0:
RA-5(3): Breadth and Depth of Coverage

Control Statement

The organization employs vulnerability scanning procedures that can identify the breadth and depth of coverage (i.e., information system components scanned and vulnerabilities checked).